This is an automated email from the git hooks/post-receive script. apo-guest pushed a commit to branch master in repository jackrabbit.
commit db5bd98dd7e2523a16d1eade6fa9f85f770a9353 Author: Markus Koschany <[email protected]> Date: Sat Jun 20 23:19:42 2015 +0200 Update changelog for 2.10.1-1 --- debian/changelog | 28 +++++++++++++++++++++++++--- 1 file changed, 25 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index 286811e..da81c72 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,31 @@ -jackrabbit (2.10.1-1) UNRELEASED; urgency=medium +jackrabbit (2.10.1-1) unstable; urgency=high * Team upload. - * New upstream release. + * Imported Upstream version 2.10.1. + - Fix CVE-2015-1833 (Closes: #787316) + When processing a WebDAV request body containing XML, the XML parser can + be instructed to read content from network resources accessible to the + host, identified by URI schemes such as "http(s)" or "file". Depending on + the WebDAV request, this can not only be used to trigger internal network + requests, but might also be used to insert said content into the request, + potentially exposing it to the attacker and others. + * Update watch file and track upstream's stable releases. + * Update get-orig-source-target. Download the current version. + * Drop orig-tar.sh script. We use upstream's tarballs now. + * Repack the orig tarball. Change compression from zip to tar.xz. + * Remove maven.publishedRules. It is not needed. + * Use compat level 9 and require debhelper >= 9. + * Declare compliance with Debian Policy 3.9.6. + * Use canonical Vcs fields. + * wrap-and-sort -sa. + * Drop modules.diff because we disable all modules except webdav in + libjackrabbit.poms already. + * Fix Format field. Add myself to debian/ copyright holders. + * Use Files-Excluded mechanism to remove binary files. + * Fix lintian warnings dep5-copyright-license-name-not-unique + and comma-separated-files-in-dep5-copyright. - -- Markus Koschany <[email protected]> Sat, 20 Jun 2015 20:50:22 +0200 + -- Markus Koschany <[email protected]> Sat, 20 Jun 2015 23:14:43 +0200 jackrabbit (2.3.6-1) unstable; urgency=low -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/jackrabbit.git _______________________________________________ pkg-java-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits
